From 8edb013fda87e5d7db90dc9dd039f9302c19871f Mon Sep 17 00:00:00 2001
From: LizardByte-bot <108553330+LizardByte-bot@users.noreply.github.com>
Date: Thu, 12 Feb 2026 19:05:55 +0000
Subject: [PATCH] chore: update GitHub Actions to use commit hashes

---
 .github/workflows/sync-release-assets.yml | 6 +++---
 .github/workflows/update-pages.yml        | 4 ++--
 2 files changed, 5 insertions(+), 5 deletions(-)

diff --git a/.github/workflows/sync-release-assets.yml b/.github/workflows/sync-release-assets.yml
index ebeebea..9d2187c 100644
--- a/.github/workflows/sync-release-assets.yml
+++ b/.github/workflows/sync-release-assets.yml
@@ -29,7 +29,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v6
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd  # v6.0.2
         with:
           token: ${{ secrets.GH_BOT_TOKEN }}
 
@@ -49,7 +49,7 @@ jobs:
           fi
 
       - name: Get organization repositories and download assets
-        uses: actions/github-script@v8
+        uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd  # v8.0.0
         with:
           github-token: ${{ secrets.GH_BOT_TOKEN }}
           script: |
@@ -69,7 +69,7 @@ jobs:
             await syncAssetsWithMetadata(github, context, isPullRequest, maxNewAssets);
 
       - name: Generate packages.json
-        uses: actions/github-script@v8
+        uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd  # v8.0.0
         with:
           github-token: ${{ secrets.GH_BOT_TOKEN }}
           script: |
diff --git a/.github/workflows/update-pages.yml b/.github/workflows/update-pages.yml
index 996d2c9..56ae085 100644
--- a/.github/workflows/update-pages.yml
+++ b/.github/workflows/update-pages.yml
@@ -25,10 +25,10 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd  # v6.0.2
 
       - name: Upload artifact
-        uses: actions/upload-artifact@v6
+        uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f  # v6.0.0
         with:
           name: prep
           path: gh-pages-template/